Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/a6CptZdPneaNVLwrV7vdvLW53D0.roa
File: a6CptZdPneaNVLwrV7vdvLW53D0.roa (raw, json)
Hash identifier: eXGV42Fq5lcGUZlbJhN0lj2Sw0OpYQq8L5GJZYniGro=
Subject key identifier: 6B:A0:A9:B5:97:4F:9D:E6:8D:54:BC:2B:57:BB:DD:BC:B5:B9:DC:3D
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019C954C3D446D0A22815FCDDB9BF8FB2D9F
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/a6CptZdPneaNVLwrV7vdvLW53D0.roa
Signing time: Wed 25 Feb 2026 14:55:27 +0000
ROA not before: Wed 25 Feb 2026 14:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49468
IP address blocks: 89.34.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:4c:3d:44:6d:0a:22:81:5f:cd:db:9b:f8:fb:2d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Feb 25 14:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ba0a9b5974f9de68d54bc2b57bbddbcb5b9dc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:7b:6a:9d:8a:9b:3e:53:7e:ff:90:e3:8e:
f1:a7:0a:10:72:9f:f3:4a:6a:a3:de:ff:17:83:de:
d0:7c:d4:10:1b:52:43:dc:f1:a3:43:b4:6b:57:0f:
f8:ae:4b:ba:71:a3:66:f9:4b:d0:bf:f0:4d:22:1b:
d5:2c:6b:61:44:44:93:56:01:9a:70:cd:f0:a8:7c:
83:ac:27:a7:28:07:75:88:31:6f:5b:a3:81:1d:73:
11:bb:78:2b:9e:60:09:52:fa:a7:31:54:62:06:3a:
84:d7:51:ad:e2:c9:85:03:ed:45:3e:2f:fb:16:6c:
da:ba:18:50:ce:b4:03:ba:43:b3:39:12:a4:ec:b2:
c4:ad:a9:49:96:13:a0:7a:de:0d:9e:28:72:ac:c6:
3c:65:e7:55:20:a8:92:6b:3f:19:e7:33:16:b1:0d:
44:bb:ac:b5:a0:6d:03:00:c3:12:c5:45:b9:e0:52:
26:8d:26:5c:8f:40:6e:bc:64:2e:93:e2:42:5e:c3:
67:28:12:15:9b:9b:a5:19:9b:5a:db:14:cb:91:67:
f4:2e:5d:d9:2a:47:09:76:2e:27:45:26:c9:22:46:
65:e8:f7:8a:8c:50:e9:93:cf:ed:a4:41:ec:c6:72:
c8:72:f4:66:83:04:c9:ba:b6:69:c4:ed:11:fc:89:
71:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A0:A9:B5:97:4F:9D:E6:8D:54:BC:2B:57:BB:DD:BC:B5:B9:DC:3D
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/a6CptZdPneaNVLwrV7vdvLW53D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.110.0/24
Signature Algorithm: sha256WithRSAEncryption
03:e9:0a:1f:a5:f0:30:7b:a3:9a:b3:92:97:24:95:d8:58:7c:
88:f1:3e:f4:14:a9:ed:e8:00:ed:6b:6d:6f:7a:e8:a0:8f:f3:
61:d1:68:f1:fd:d4:68:7c:77:00:7b:6f:82:00:75:f8:5b:44:
93:be:3e:42:8c:8d:2a:86:d9:53:80:42:7f:b2:87:1d:0b:86:
4b:b6:b3:e9:28:d5:00:26:fa:08:4d:ca:e9:6f:7d:8a:d7:ee:
b4:8a:2b:2c:72:d1:d5:7f:59:9e:3a:94:b9:c2:f6:11:e0:66:
d5:af:7b:ad:6e:eb:e9:46:5e:ae:d7:9b:41:0b:02:eb:d1:cf:
ee:50:7b:8c:88:5b:77:b4:9f:1a:93:5a:5b:7c:84:b6:93:83:
71:a7:6a:9f:d8:56:22:44:23:37:c5:3a:e8:ac:41:19:09:40:
5f:eb:7c:cc:8b:fe:2c:5d:a0:86:ff:9f:7e:7c:7b:e3:61:ca:
a3:28:d2:59:ba:a1:03:c0:2f:12:a9:4d:49:6a:04:4c:df:9e:
ed:4a:a5:8c:1f:22:7a:c7:4a:0f:48:15:89:8f:b5:2b:18:2e:
98:50:5d:d3:9c:b8:ed:73:2b:80:b8:d4:0e:c6:35:6e:61:d0:
b3:86:b9:02:c0:93:49:76:3c:b6:57:19:f5:b8:e2:1d:c9:fe:
a6:73:a5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:21:11 2026 by rpki-client